MemMorph

Collection Summary

Technical facts, incident reports, operational policies처럼 위장한 crafted memory records로 agent의 contextual perception을 바꾸고 attacker-preferred tool을 선택하게 하는 attack이다.

Rollout-Buffer Relevance

• **Target store**: factual, episodic, policy-style long-term memories and accumulated tool-use experience.
• **Attack path**: ordinary interaction or direct write -> memory rewriting/persistence -> context retrieval -> biased tool selection.
• **Security relevance**: converts a poisoned experience store into an action-routing and privilege-escalation surface.
• **Affected types**: tool-using agents, operations agents, coding agents, SOC agents with learned tool policies.